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I . - 9. (cancelled) 

10. (withdrawn) A bridge for use in a local area network comprising; 

a plurality of ports capable of transmitting and receiving data on a 
network segment; 

a plurality of shared buffer memories for buffering data received on 
said ports or waiting to be transmitted on said ports; 

a bridge controller capable of reading the source and destination 
addresses of a data packet received on one of said ports; and 

a collector for collecting data traffic statistics from agents operating 
on other devices in the network and a proxy for receiving configuration 
packets from a manager and communicating configuration data to said 
agents. 

I I . (withdrawn) The apparatus according to claim 10 wherein said bridge 
collector forwards traffic statistics to a domain proxy. 

12. (withdrawn) The apparatus according to claim 10 further comprising a 
means for generating at said collector traffic statistics for multicast packets. 

1 3 . (withdrawn) A local area network comprising; 

a plurality of end systems, each with a connection to a network segment 
wherein said end systems are capable of transmitting data on said segment 
and wherein at least one of said end systems includes an agent for collection 
of traffic statistics; and 

a plurality of collectors having connections to receive data from at 
least one agent in said ESs or from at least one other collector. 



2 



Attorney Docket: I129.US.DIV 
Fletcher, et ai, 
S/N: 09/518,221 

14. (withdrawn) The local area network according to claim 13 wherein said 
collectors are further capable of detecting multicast packets and compiling 
traffic statistics on said packets. 

15. (withdrawn) The local area network according to claim 13 wherein said 
collectors are further capable of receiving probe configuration packets from 
a network manager and then sending configuration packets to each 
individual agent in the network. 

1 6. (previously presented) A method for distributed remote network 
monitoring (dRMON) in a LAN comprising! 

deploying, within each of a plurality of ESs to be monitored, 
executable code comprising an dRMON agent associated with the ES 
configured to communicate with a dRMON proxy connected to the LAN, 
each dRMON agent implementing RMON functional groups but only- 
capturing and analyzing packets transmitted and/or received by the ES; 

forwarding, periodically by the dRMON agents, agent data including 
statistics and/or captured packets to said dRMON proxy; and 

combining the forwarded agent data at the dRMON proxy. 

17. (previously presented) The method according to claim 16 wherein said 
dRMON proxy includes a set of SNMP interfaces so that existing network 
application management software can interact with said dRMON proxy as 
though said dRMON proxy were a non-distributed RMON probe. 
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1 8. (previously presented) The method according to claim 1 6 wherein in a 
default mode, ESs in the same multicast domain are treated by a dRMON 
proxy as though they are on one LAN segment to RMON applications that 
interact with the dRMON proxy though it were a RMON probe such that 
ports and hosts are combinable to create Virtual LAN (VLAN) definitions to 
cause the monitoring function to operate as though all selected hosts were on 
the same LAN segment being served by the same RMON probe with the 
dRMON proxy creating and maintaining several such views with each 
appearing as one interface to RMON management applications. 

19. (previously presented) The method according to claim 16 whereby said 
dRMON agents perform continual response time monitoring and forward 
monitoring results to the dRMON Proxy. 

20. (cancelled) 

21. (withdrawn) An agent for distributed network monitoring comprising: 

an RMON Engine for receiving a packet stream coming from a DTA 
and subjecting it to RMON analyses as configured via the proxy; 
RMON Data Structures; 
filters; 

an event generator; 
Down-Loadable-Modules manager; 
dRMON Interface Module; and 
a protocol interface layer. 
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22. (withdrawn) The agent of claim 21 implemented in the C programming 
language with executable code launched each time ES is started or rebooted 
and the agent may be tightly bound to ES adaptor driver software. Because 
the dRMON agent has no visible ES user interface, the ES user is totally 
unaware of the agents presence. 

23. (withdrawn) A proxy for distributed network monitoring comprising: 

an agent discovery engine for automatically discovering all of the 
dRMON Agents within its management sphere; 

a time-stamper for stamping statistics and packets received from 
agents; 

an agent configuration for setting how much memory/storage to 
reserve for RMON data space, version management, etc.; 

an RMON configuration for setting filters, historical sampling 
intervals and other MIB-defined user-settable options; and; 

an updater for automatically updating agents via the network. 

24. (withdrawn) A method for the distributed collecting of network data 
traffic statistics, wherein said network comprises end systems (ES) 
connected to network segments, the method comprising: 

capturing network data at a plurality of said ESs, wherein each of said 
plurality of said ESs captures only network data that said each of said 
plurality of said ESs sends or receives; 

computing individual network traffic statistics at said plurality of said 
ESs, said individual traffic statistics being extracted from analysis of said 
captured network data; 
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transmitting data containing said individual traffic statistics to a 
collector from said plurality of said ESs; 

compiling said individual traffic statistics from individual ESs into 
group network statistics; and 

providing reports based on said compiled statistics, from said 
collector, to a network manager. 
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